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Question: 1 


Which two parameters are required in a back end set’s HTTP health check? (Choose two.) 


A. response body 
B. URL path 

C. timeout 

D. port 

E. status code 


Answer: BD 


Explanation: 

https://docs.cloud.oracle.com/iaas/Content/GSG/Tasks/loadbalancing.htm#Create 

Enter the Health Check details. 

Load Balancing automatically checks the health of the instances for your load balancer. If it detects 
an unhealthy instance, it stops sending traffic to the instance and reroutes traffic to healthy instances. 
In this step, you provide the information required to check the health of servers in the backend set 
and ensure that they can receive data traffic. 

Protocol: Select HTTP. 

Port: Enter 80 

URL Path (URI): Enter / 

The rest of the fields are optional and can be left blank for this tutorial. 

Click Create. 


Question: 2 


Which two are true for achieving High Availability on Oracle Cloud Infrastructure? (Choose two.) 


A. Store your database across multiple regions so that half of the data resides in one region and the 
other half resides in another region. 

B. Attach your block volume form Availability Domain 1 to a compute instance in Availability Domain 
2 (and vice versa) so that they are highly available. 

C. Configure your database to have Data Guard in another Availability Domain in Sync mode within a 
region. 

D. Store your database files on Object Storage so that they are available in all Availability Domains in 
all regions. 

E. Distribute your application servers across all Availability Domains within a region. 


Answer: C,E 
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Question: 3 


Which two configuration formats does Terraform support? (Choose two.) 


A. YAML 
B. JSON 
C. HCL 
D. XML 


Answer: B,C 


Explanation: 

References: 

Terraform configuration files can use either of two formats: Terraform domain-specific language 
(HashiCorp Configuration Language format [HCL]), which is the recommended approach, or JSON 
format if the files need to be machine-readable. 


Question: 4 


At the end of a terraform apply operation, what is the default output? 


A. nothing by default 

B. statistics about what was added, changed, and destroyed 

C. the entire state file 

D. statistics about what was added, changed, and destroyed, and the values of outputs 


Answer: D 


Question: 5 


You have an application deployed in Oracle Cloud Infrastructure running only in the Phoenix region. 
You were asked to create a disaster recovery (DR) plan that will protect against the loss of critical 
data. The DR site must be at least 500 miles from your primary site and data transfer between the 
two sites must not traverse the public Internet. 

Which is the recommended disaster recovery plan? 

A. Create a new virtual cloud network (VCN) in the Phoenix region and create a subnet in one 
availability domain (AD) that is not currently being used by your production systems. Establish VCN 
peering between the production and DR sites. 

B. Create a DR environment in Ashburn. Associate a DRG with the VCN in each region and create a 
remote peering connection between the two VCNs. 

C. Create a DR environment in Ashburn and provision a FastConnect virtual circuit using DRG 
between the regions. 

D. Create a DR environment in Ashburn. Associate a dynamic routing gateway (DRG) with the VCN in 
each region and configure an IPsec VPN connection between the two regions. 


Answer: B 
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Explanation: 

Remote VCN peeringis the process of connecting two VCNs in different regions (but the 
same tenancy ). The peering allows the VCNs' resources to communicate using private IP addresses 
without routing the traffic over the internet or through your on-premises network. Without peering, 
a given VCN would need an internet gateway and public IP addresses for the instances that need to 
communicate with another VCN in a different region. 

At a high level, the Networking service components required for a remote peering include: 

- Two VCNs with non-overlapping CIDRs, in different regions that support remote peering. The VCNs 
must be in the same tenancy. 

- A dynamic routing gateway (DRG) attached to each VCN in the peering relationship. Your VCN 
already has a DRG if you're using an IPSec VPN or an Oracle Cloud Infrastructure FastConnect private 
virtual circuit. 

A remote peering connection (RPC) on each DRG in the peering relationship. 

A connection between those two RPCs. 

Supporting route rules to enable traffic to flow over the connection, and only to and from select 
subnets in the respective VCNs (if desired). 

Supporting security rules to control the types of traffic allowed to and from the instances in the 
subnets that need to communicate with the other VCN. 


ORACLE CLOUD INFRASTRUCTURE — REGION 1 ORACLE CLOUD INFRASTRUCTURE — REGION 2 


i 
i 
' 
I 
' 


VCN-1 VCN-2 
i 10.0.0.0/16 192.168.0.0/16 


With supporting route tables and security rules 
in each VCN to enable traffic 


Question: 6 


You want an instance in your compartment to make API calls to other services within Oracle Cloud 
Infrastructure without storing credentials in a configuration file. 
What do you need to do? 


A. No action is required. By default, all VM instances are created with an Instance Principal. 
B. Instances cannot access services outside their compartment. 

C. VM instances are treated as users. Create a user and assign the user to that VM instance. 
D. Create appropriate matching rules in the Dynamic Group to create an Instance Principal. 


Answer: D 
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Explanation: 
References: 
https://docs.cloud.oracle.com/iaas/Content/Identity/Tasks/managingdynamicgroups.htm 


Question: 7 


Which three must be configured for a load balancer to accept incoming traffic? (Choose two.) 


A. a listener 

B. a back-end server 

C. a back end set 

D. a security list that is open on a listener port 
E. a certificate 


Answer: ABC 


Explanation: 
https://docs.cloud.oracle.com/iaas/Content/Balance/Tasks/managingloadbalancer.htm?tocpath=Ser 
vices%7CLoad%20Balancing%7C 5 

The essential components for load balancing include: 

e A load balancer with pre-provisioned bandwidth. 

e A backend set with a health check policy. See Managing Backend Sets. 

e Backend servers for your backend set. See Managing Backend Servers. 

e One or more listeners . See Managing Load Balancer Listeners. 

e Load balancer subnet security rules to allow the intended traffic. To learn more about these rules, 
see Security Rules. 

e Optionally, you can associate your listeners with SSL server certificate bundles to manage how your 
system handles SSL traffic. See Managing SSL Certificates. 


Question: 8 


Which two statements are true about Oracle Cloud Infrastructure Compute Service? (Choose two.) 


A. You can launch a virtual or bare metal instance by using the same Launchinstance API. 

B. You cannot launch a bare metal server in Oracle Cloud Infrastructure Compute Service. 

C. You can attach a block volume in an Availability Domain other than your compute instance. 
D. You can share custom images across tenancies and regions. 


Answer: A,D 


Explanation: 

References: 

Regions and Availability Domains 

Volumes are only accessible to instances in the same availability domain . You cannot move a volume 
between availability domains or regions. 


FYI: https://docs.cloud.oracle.com/iaas/Content/Block/Concepts/overview.htm 
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Question: 9 


Which five are the required parameters to launch an instance in Oracle Cloud Infrastructure? (Choose 
five.) 


A. subnet 

B. Availability Domain 

C. Virtual Cloud Network 
D. host name 

E. instance shape 

F. image operating system 
G. private IP address 


Answer: A,B,C,E,F 


Explanation: 
References: 
https://docs.cloud.oracle.com/iaas/Content/Compute/Concepts/computeoverview.htm 


Question: 10 


Which DNS resource record type is used to point a host name to an IPv4 address? 


A. ALIAS 
B.A 

C. CNAME 
D. AAAA 


Answer: B 


Explanation: 

References: 
https://docs.cloud.oracle.com/iaas/Content/DNS/Reference/supporteddnsresource.htm ?tocpath=Se 
rvices%7CDNS%7C 2 
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